last executing test programs: 2.932083945s ago: executing program 0 (id=1155): r0 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.761974048s ago: executing program 2 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 2.472229729s ago: executing program 1 (id=1158): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf253400000008000300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.471618013s ago: executing program 1 (id=1159): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001940)=ANY=[], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e20, 0x8}}}}}, 0x0) 2.402037709s ago: executing program 1 (id=1160): bpf$PROG_LOAD(0x5, 0x0, 0x5c) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.061982642s ago: executing program 0 (id=1161): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x820004ce) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.991324754s ago: executing program 0 (id=1162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7b3, 0x2}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd24, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x99d411631b5903aa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.892586787s ago: executing program 0 (id=1163): socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_dev$dri(0x0, 0x1, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8000007, 'syz0\x00'}) 1.892324536s ago: executing program 2 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad320fbc9b554e2a800040000ea073056a9", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.792462724s ago: executing program 2 (id=1165): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x70bd29, 0x25dddbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x100}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000840) 1.792065325s ago: executing program 2 (id=1166): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'dt2817\x00', [0x4f29, 0x5, 0x3ff, 0x601, 0x1, 0xcc7, 0xfff, 0x2000004, 0x809, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x101, 0xe1cb, 0x5, 0x1a44b, 0x20003, 0x201, 0x8f5e, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x40, 0x408, 0x4, 0x8000000, 0x1]}) 1.732340797s ago: executing program 2 (id=1167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r2, 0x7}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='adfs\x00', 0x218800, 0x0) r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0xd0, 0x300, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private0, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.560469284s ago: executing program 1 (id=1168): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf253400000008000300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.480720312s ago: executing program 1 (id=1169): r0 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.072329628s ago: executing program 3 (id=1171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000200)="bad330fbc9b5", 0x6, 0xc1, &(0x7f00000001c0)={0x11, 0xf8, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.016218775s ago: executing program 0 (id=1172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0x4, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xd, 0x5, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0xff}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0xe000003b, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x404, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x2, '\x00', 0x100000001}) 842.322239ms ago: executing program 0 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() syz_emit_ethernet(0x6a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "6a26ccb7622a98cf58ac0f295fe0111d66706c62b9564ce0", "29fe1df5c401b77c31f2e9c517c0757aeb191e3b958a9b85564c45be3271886e"}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 582.583528ms ago: executing program 1 (id=1174): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x45, 0x9b, 0xc7, 0x40, 0x424, 0xcf18, 0xa045, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa4, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x0, 0x89, 0x45, 0xa7, 0x4}}]}}]}}, 0x0) 162.409105ms ago: executing program 2 (id=1175): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xb31a, 0x5}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r7) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) 162.212868ms ago: executing program 3 (id=1176): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}]}]}, 0x1bc}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 92.566808ms ago: executing program 3 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newlink={0x58, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x354, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @random}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 92.38862ms ago: executing program 3 (id=1178): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf253400000008000300", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.466763ms ago: executing program 3 (id=1179): iopl(0x3) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881aa, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 0s ago: executing program 3 (id=1180): chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20902' (ED25519) to the list of known hosts. [ 41.167718][ T5854] cgroup: Unknown subsys name 'net' [ 41.306513][ T5854] cgroup: Unknown subsys name 'cpuset' [ 41.314912][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.295774][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.283584][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.284841][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.286785][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.288731][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.291125][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.293476][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.295172][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.296754][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.298003][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.298293][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.298792][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.299838][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.302130][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.302965][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.303778][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.304688][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.309513][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.324353][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.330251][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.333692][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.604528][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 46.724098][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 46.809135][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 46.824560][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.828638][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.831742][ T5945] bridge_slave_0: entered allmulticast mode [ 46.835935][ T5945] bridge_slave_0: entered promiscuous mode [ 46.886596][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.888973][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.891353][ T5945] bridge_slave_1: entered allmulticast mode [ 46.895032][ T5945] bridge_slave_1: entered promiscuous mode [ 46.916128][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.989984][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.031653][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.167217][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.169768][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.172421][ T5938] bridge_slave_0: entered allmulticast mode [ 47.175541][ T5938] bridge_slave_0: entered promiscuous mode [ 47.180166][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.185063][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.188208][ T5938] bridge_slave_1: entered allmulticast mode [ 47.191676][ T5938] bridge_slave_1: entered promiscuous mode [ 47.199351][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.202525][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.205589][ T5939] bridge_slave_0: entered allmulticast mode [ 47.209537][ T5939] bridge_slave_0: entered promiscuous mode [ 47.214222][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.217319][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.220433][ T5939] bridge_slave_1: entered allmulticast mode [ 47.224638][ T5939] bridge_slave_1: entered promiscuous mode [ 47.229947][ T5945] team0: Port device team_slave_0 added [ 47.312519][ T5945] team0: Port device team_slave_1 added [ 47.340119][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.352595][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.383886][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.421338][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.448900][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.451862][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.462692][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.482448][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.485490][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.488522][ T5951] bridge_slave_0: entered allmulticast mode [ 47.493043][ T5951] bridge_slave_0: entered promiscuous mode [ 47.496793][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.499843][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.502922][ T5951] bridge_slave_1: entered allmulticast mode [ 47.506818][ T5951] bridge_slave_1: entered promiscuous mode [ 47.524849][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.527097][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.535212][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.604760][ T5939] team0: Port device team_slave_0 added [ 47.612553][ T5939] team0: Port device team_slave_1 added [ 47.616247][ T5938] team0: Port device team_slave_0 added [ 47.620731][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.627631][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.709214][ T5938] team0: Port device team_slave_1 added [ 47.738351][ T5951] team0: Port device team_slave_0 added [ 47.757999][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.760423][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.768738][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.821973][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.825130][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.835786][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.841904][ T5951] team0: Port device team_slave_1 added [ 47.844496][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.847253][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.858592][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.882649][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.885512][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.895931][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.952771][ T5945] hsr_slave_0: entered promiscuous mode [ 47.955334][ T5945] hsr_slave_1: entered promiscuous mode [ 47.965571][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.968464][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.981059][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.015678][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.018597][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.029419][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.066249][ T5939] hsr_slave_0: entered promiscuous mode [ 48.069456][ T5939] hsr_slave_1: entered promiscuous mode [ 48.072539][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 48.074993][ T5939] Cannot create hsr debugfs directory [ 48.134338][ T5938] hsr_slave_0: entered promiscuous mode [ 48.136682][ T5938] hsr_slave_1: entered promiscuous mode [ 48.138876][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 48.140828][ T5938] Cannot create hsr debugfs directory [ 48.274412][ T5951] hsr_slave_0: entered promiscuous mode [ 48.277058][ T5951] hsr_slave_1: entered promiscuous mode [ 48.279581][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 48.281410][ T5951] Cannot create hsr debugfs directory [ 48.332795][ T64] Bluetooth: hci0: command tx timeout [ 48.332804][ T5953] Bluetooth: hci2: command tx timeout [ 48.422614][ T64] Bluetooth: hci3: command tx timeout [ 48.422718][ T5953] Bluetooth: hci1: command tx timeout [ 48.576300][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.584424][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.590689][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.601038][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.633698][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.639470][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.658820][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.674906][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.703529][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.708697][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.714501][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.729411][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.777113][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.789185][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.795920][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.800306][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.833074][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.881141][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.903965][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.907220][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.928012][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.932646][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.935117][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.968707][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.002309][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.005275][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.017895][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.031129][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.034507][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.059266][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.066073][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.080493][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.083646][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.105694][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.108712][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.129197][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.146183][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.148505][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.163628][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.165967][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.184062][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.223560][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.268768][ T5945] veth0_vlan: entered promiscuous mode [ 49.284025][ T5945] veth1_vlan: entered promiscuous mode [ 49.290768][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.321411][ T5945] veth0_macvtap: entered promiscuous mode [ 49.335303][ T5945] veth1_macvtap: entered promiscuous mode [ 49.347369][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.361779][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.367857][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.379684][ T5951] veth0_vlan: entered promiscuous mode [ 49.391171][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.403108][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.406616][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.417043][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.430239][ T5951] veth1_vlan: entered promiscuous mode [ 49.445012][ T5939] veth0_vlan: entered promiscuous mode [ 49.460202][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.490605][ T5951] veth0_macvtap: entered promiscuous mode [ 49.496777][ T5939] veth1_vlan: entered promiscuous mode [ 49.504290][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.504321][ T5951] veth1_macvtap: entered promiscuous mode [ 49.507691][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.557400][ T5938] veth0_vlan: entered promiscuous mode [ 49.561537][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.563750][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.565321][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.572186][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.580840][ T5938] veth1_vlan: entered promiscuous mode [ 49.604771][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.614910][ T5939] veth0_macvtap: entered promiscuous mode [ 49.618836][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.621796][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.635234][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.637685][ T5939] veth1_macvtap: entered promiscuous mode [ 49.644615][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.653471][ T5938] veth0_macvtap: entered promiscuous mode [ 49.660000][ T5938] veth1_macvtap: entered promiscuous mode [ 49.697790][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.704998][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.705016][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.713937][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.763661][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.797796][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.801908][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.808536][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.821062][ T1141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.831943][ T1141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.836303][ T1141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.866317][ T1141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.890450][ T1141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.894417][ T1141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.897349][ T1141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.913351][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.964943][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.969225][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.192601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.226358][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.245198][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.246696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.349335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.352115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 50.413101][ T5953] Bluetooth: hci0: command tx timeout [ 50.415715][ T64] Bluetooth: hci2: command tx timeout [ 50.443200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.446511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.470538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 50.475017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.492221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 50.492297][ T64] Bluetooth: hci3: command tx timeout [ 50.502534][ T64] Bluetooth: hci1: command tx timeout [ 50.517005][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.543555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.548495][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.884785][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.919430][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.099443][ T6041] tipc: Started in network mode [ 51.101119][ T6041] tipc: Node identity c, cluster identity 4711 [ 51.103220][ T6041] tipc: Node number set to 12 [ 52.117745][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 52.350616][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 52.450818][ T6061] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 52.454166][ T6061] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'. [ 52.502280][ T5953] Bluetooth: hci0: command tx timeout [ 52.575286][ T5949] Bluetooth: hci1: command tx timeout [ 52.575960][ T5950] Bluetooth: hci3: command tx timeout [ 52.578574][ T64] Bluetooth: hci2: command tx timeout [ 52.678788][ T6066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.893440][ T6074] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.143190][ T1324] cfg80211: failed to load regulatory.db [ 54.035223][ T6077] tipc: Started in network mode [ 54.037346][ T6077] tipc: Node identity c, cluster identity 4711 [ 54.039569][ T6077] tipc: Node number set to 12 [ 54.652992][ T64] Bluetooth: hci3: command tx timeout [ 54.662366][ T64] Bluetooth: hci2: command tx timeout [ 54.662413][ T5950] Bluetooth: hci0: command tx timeout [ 54.664126][ T64] Bluetooth: hci1: command tx timeout [ 54.922666][ T6097] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.639172][ T6110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 59.608792][ T6131] sp0: Synchronizing with TNC [ 60.848043][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 60.912152][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 61.817803][ T6189] syz.0.41 (6189) used greatest stack depth: 19128 bytes left [ 61.855335][ T6196] bridge: RTM_NEWNEIGH with invalid ether address [ 62.076179][ T6204] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.360108][ T6220] tipc: Started in network mode [ 63.361790][ T6220] tipc: Node identity c, cluster identity 4711 [ 63.363990][ T6220] tipc: Node number set to 12 [ 63.693750][ T5950] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 63.697264][ T5950] Bluetooth: hci0: Injecting HCI hardware error event [ 63.713607][ T5950] Bluetooth: hci0: hardware error 0x00 [ 64.812937][ T6237] sp0: Synchronizing with TNC [ 65.197807][ T6241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 65.200502][ T6241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 65.205879][ T6241] vhci_hcd vhci_hcd.0: Device attached [ 65.364135][ T6241] process 'syz.0.54' launched '/dev/fd/11' with NULL argv: empty string added [ 65.492132][ T6007] usb 38-1: SetAddress Request (2) to port 0 [ 65.494348][ T6007] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 65.540765][ T6242] vhci_hcd: connection reset by peer [ 65.544538][ T60] vhci_hcd: stop threads [ 65.546117][ T60] vhci_hcd: release socket [ 65.548703][ T60] vhci_hcd: disconnect device [ 65.783263][ T5950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 66.461564][ T6250] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.535555][ T6251] bridge: RTM_NEWNEIGH with invalid ether address [ 68.226126][ T6267] befs: (nullb0): No write support. Marking filesystem read-only [ 68.230142][ T6267] befs: (nullb0): invalid magic header [ 68.800778][ T6279] befs: (nullb0): No write support. Marking filesystem read-only [ 68.807633][ T6279] befs: (nullb0): invalid magic header [ 68.892756][ T5950] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 68.895898][ T5950] Bluetooth: hci2: Injecting HCI hardware error event [ 68.899078][ T5950] Bluetooth: hci2: hardware error 0x00 [ 70.555250][ T6288] tipc: Started in network mode [ 70.556885][ T6288] tipc: Node identity c, cluster identity 4711 [ 70.558809][ T6288] tipc: Node number set to 12 [ 70.587067][ T6007] usb 38-1: device descriptor read/8, error -110 [ 70.972291][ T5950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 71.051297][ T6296] befs: (nullb0): No write support. Marking filesystem read-only [ 71.090364][ T6296] befs: (nullb0): invalid magic header [ 71.163229][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.291200][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 72.179374][ T6295] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 72.181596][ T6295] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.217733][ T6295] vhci_hcd vhci_hcd.0: Device attached [ 72.510463][ T6007] usb usb38-port1: attempt power cycle [ 72.537924][ T6025] usb 44-1: SetAddress Request (2) to port 0 [ 72.539999][ T6025] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 73.027036][ T6307] vhci_hcd: connection closed [ 73.032214][ T166] vhci_hcd: stop threads [ 73.042110][ T166] vhci_hcd: release socket [ 73.043705][ T166] vhci_hcd: disconnect device [ 73.556191][ T6007] usb usb38-port1: unable to enumerate USB device [ 73.678655][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.77'. [ 74.339653][ T6329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.124064][ T6341] befs: (nullb0): No write support. Marking filesystem read-only [ 75.127323][ T6341] befs: (nullb0): invalid magic header [ 77.491823][ T6377] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.800355][ T6374] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 77.802441][ T6374] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.812506][ T6374] vhci_hcd vhci_hcd.0: Device attached [ 77.901843][ T6375] vhci_hcd: connection reset by peer [ 77.912542][ T1141] vhci_hcd: stop threads [ 77.914083][ T1141] vhci_hcd: release socket [ 77.915801][ T1141] vhci_hcd: disconnect device [ 78.211667][ T6025] usb 44-1: device descriptor read/8, error -110 [ 78.607189][ T6025] usb usb44-port1: attempt power cycle [ 79.703117][ T6025] usb usb44-port1: unable to enumerate USB device [ 80.476310][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 80.591719][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 80.958027][ T6418] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.212086][ C1] hrtimer: interrupt took 27552 ns [ 81.627301][ T6430] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 81.629630][ T6430] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.642214][ T6430] vhci_hcd vhci_hcd.0: Device attached [ 81.982146][ T6007] usb 42-1: SetAddress Request (2) to port 0 [ 81.984111][ T6007] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 82.204353][ T6431] vhci_hcd: connection reset by peer [ 82.256163][ T46] vhci_hcd: stop threads [ 82.257531][ T46] vhci_hcd: release socket [ 82.260164][ T46] vhci_hcd: disconnect device [ 84.665667][ T6462] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.742550][ T6467] ptrace attach of ""[6468] was attempted by "/syz-executor exec"[6467] [ 84.754154][ T6467] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 84.757157][ T6467] netlink: 224 bytes leftover after parsing attributes in process `syz.2.115'. [ 87.052156][ T6007] usb 42-1: device descriptor read/8, error -110 [ 87.103098][ T6489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 87.105195][ T6489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.206056][ T6489] vhci_hcd vhci_hcd.0: Device attached [ 87.712566][ T6007] usb 42-1: SetAddress Request (3) to port 0 [ 87.714493][ T6007] usb 42-1: new SuperSpeed USB device number 3 using vhci_hcd [ 87.759819][ T6490] vhci_hcd: connection reset by peer [ 87.772809][ T1139] vhci_hcd: stop threads [ 87.783200][ T1139] vhci_hcd: release socket [ 87.788916][ T1139] vhci_hcd: disconnect device [ 88.082301][ T6508] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.560933][ T6510] ptrace attach of ""[6512] was attempted by "/syz-executor exec"[6510] [ 88.568377][ T6510] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 88.570778][ T6510] netlink: 224 bytes leftover after parsing attributes in process `syz.1.129'. [ 91.589564][ T6544] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.906272][ T6539] sp0: Synchronizing with TNC [ 92.720013][ T6560] befs: (nullb0): No write support. Marking filesystem read-only [ 92.723028][ T6560] befs: (nullb0): invalid magic header [ 92.736607][ T6561] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 92.738705][ T6561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.741422][ T6561] vhci_hcd vhci_hcd.0: Device attached [ 93.024667][ T6562] vhci_hcd: connection reset by peer [ 93.053000][ T1178] vhci_hcd: stop threads [ 93.055248][ T1178] vhci_hcd: release socket [ 93.058393][ T6007] usb 42-1: device descriptor read/8, error -110 [ 93.060717][ T1178] vhci_hcd: disconnect device [ 93.080460][ T6570] bridge: RTM_NEWNEIGH with invalid ether address [ 93.163788][ T6007] usb usb42-port1: attempt power cycle [ 94.192165][ T6007] usb usb42-port1: unable to enumerate USB device [ 94.767440][ T6588] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.231574][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 95.540842][ T6605] befs: (nullb0): No write support. Marking filesystem read-only [ 95.544136][ T6605] befs: (nullb0): invalid magic header [ 96.172221][ T6610] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 96.174288][ T6610] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 96.177091][ T6610] vhci_hcd vhci_hcd.0: Device attached [ 96.442138][ T29] usb 42-1: SetAddress Request (6) to port 0 [ 96.444094][ T29] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 96.771294][ T6611] vhci_hcd: connection reset by peer [ 96.774003][ T13] vhci_hcd: stop threads [ 96.775375][ T13] vhci_hcd: release socket [ 96.776809][ T13] vhci_hcd: disconnect device [ 98.529929][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 98.634472][ T6639] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.280268][ T6646] befs: (nullb0): No write support. Marking filesystem read-only [ 99.284119][ T6646] befs: (nullb0): invalid magic header [ 99.760717][ T6657] ptrace attach of ""[6660] was attempted by "/syz-executor exec"[6657] [ 99.766121][ T6657] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 99.768569][ T6657] netlink: 224 bytes leftover after parsing attributes in process `syz.0.171'. [ 99.969716][ T6662] bridge: RTM_NEWNEIGH with invalid ether address [ 101.532468][ T29] usb 42-1: device descriptor read/8, error -110 [ 101.543942][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 101.934177][ T29] usb usb42-port1: attempt power cycle [ 102.512549][ T29] usb usb42-port1: unable to enumerate USB device [ 102.838211][ T6698] ptrace attach of ""[6699] was attempted by "/syz-executor exec"[6698] [ 102.864787][ T6698] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 102.868513][ T6698] netlink: 224 bytes leftover after parsing attributes in process `syz.3.184'. [ 105.395553][ T6723] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.006982][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'. [ 106.392280][ T6739] bridge: RTM_NEWNEIGH with invalid ether address [ 108.149741][ T6744] ptrace attach of ""[6758] was attempted by "/syz-executor exec"[6744] [ 108.157959][ T6744] netlink: 'syz.2.195': attribute type 1 has an invalid length. [ 108.160983][ T6744] netlink: 224 bytes leftover after parsing attributes in process `syz.2.195'. [ 108.907738][ T6756] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.322389][ T6770] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.474713][ T6778] bridge: RTM_NEWNEIGH with invalid ether address [ 109.887006][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 111.898462][ T6806] befs: (nullb0): No write support. Marking filesystem read-only [ 111.901056][ T6806] befs: (nullb0): invalid magic header [ 112.196952][ T6812] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.531888][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'. [ 114.000921][ T6838] befs: (nullb0): No write support. Marking filesystem read-only [ 114.003912][ T6838] befs: (nullb0): invalid magic header [ 115.381593][ T6855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.889063][ T6860] bridge: RTM_NEWNEIGH with invalid ether address [ 117.805816][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 117.932152][ T5950] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 117.936584][ T5950] Bluetooth: hci1: Injecting HCI hardware error event [ 117.939857][ T5950] Bluetooth: hci1: hardware error 0x00 [ 119.107058][ T6900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.860311][ T6911] befs: (nullb0): No write support. Marking filesystem read-only [ 119.872909][ T6911] befs: (nullb0): invalid magic header [ 119.975871][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 120.012150][ T5950] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 120.928947][ T6935] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.812989][ T6950] bridge: RTM_NEWNEIGH with invalid ether address [ 121.878921][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.253'. [ 121.985805][ T6957] sp0: Synchronizing with TNC [ 122.435975][ T6966] befs: (nullb0): No write support. Marking filesystem read-only [ 122.458415][ T6966] befs: (nullb0): invalid magic header [ 127.588760][ T6989] sp0: Synchronizing with TNC [ 128.654010][ T7007] bridge: RTM_NEWNEIGH with invalid ether address [ 129.172675][ T7020] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 129.175536][ T7020] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.179514][ T7020] vhci_hcd vhci_hcd.0: Device attached [ 129.442676][ T29] usb 42-1: SetAddress Request (10) to port 0 [ 129.444682][ T29] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 129.820671][ T7021] vhci_hcd: connection reset by peer [ 129.822762][ T1178] vhci_hcd: stop threads [ 129.824766][ T1178] vhci_hcd: release socket [ 129.826745][ T1178] vhci_hcd: disconnect device [ 130.207846][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 130.709189][ T7032] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 130.711675][ T7032] netlink: 224 bytes leftover after parsing attributes in process `syz.3.276'. [ 130.718381][ T7032] 9pnet_fd: Insufficient options for proto=fd [ 134.069611][ T7059] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 134.072355][ T7059] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 134.076053][ T7059] vhci_hcd vhci_hcd.0: Device attached [ 134.452289][ T4217] usb 44-1: SetAddress Request (6) to port 0 [ 134.454512][ T4217] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 134.492141][ T29] usb 42-1: device descriptor read/8, error -110 [ 134.688826][ T7060] vhci_hcd: connection reset by peer [ 134.691391][ T12] vhci_hcd: stop threads [ 134.693206][ T12] vhci_hcd: release socket [ 134.695008][ T12] vhci_hcd: disconnect device [ 134.883028][ T29] usb usb42-port1: attempt power cycle [ 135.310449][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 135.448704][ T29] usb usb42-port1: unable to enumerate USB device [ 136.070486][ T7088] bridge: RTM_NEWNEIGH with invalid ether address [ 139.547928][ T4217] usb 44-1: device descriptor read/8, error -110 [ 139.548020][ T7124] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 139.552343][ T7124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 139.555767][ T7124] vhci_hcd vhci_hcd.0: Device attached [ 139.707279][ T7126] vhci_hcd: connection closed [ 139.832280][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 139.836165][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 139.873993][ T7127] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 139.888332][ T1148] vhci_hcd: stop threads [ 139.890151][ T1148] vhci_hcd: release socket [ 139.912425][ T1148] vhci_hcd: disconnect device [ 139.952610][ T4217] usb usb44-port1: attempt power cycle [ 140.459298][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 140.574920][ T4217] usb usb44-port1: unable to enumerate USB device [ 144.026653][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 144.545754][ T7172] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 144.548600][ T7172] netlink: 224 bytes leftover after parsing attributes in process `syz.0.315'. [ 144.555977][ T7172] 9pnet_fd: Insufficient options for proto=fd [ 144.742464][ T7176] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.789986][ T7177] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 144.792084][ T7177] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 144.796160][ T7177] vhci_hcd vhci_hcd.0: Device attached [ 145.251407][ T7178] vhci_hcd: connection reset by peer [ 145.256599][ T1148] vhci_hcd: stop threads [ 145.258041][ T1148] vhci_hcd: release socket [ 145.259668][ T29] usb 40-1: device descriptor read/8, error -110 [ 145.259723][ T1148] vhci_hcd: disconnect device [ 145.382141][ T6032] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 145.512224][ T6032] usb 7-1: device descriptor read/64, error -71 [ 145.752427][ T6032] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 145.892564][ T6032] usb 7-1: device descriptor read/64, error -71 [ 146.004673][ T6032] usb usb7-port1: attempt power cycle [ 146.101435][ T29] usb usb40-port1: attempt power cycle [ 146.363113][ T6032] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 146.395995][ T6032] usb 7-1: device descriptor read/8, error -71 [ 146.865793][ T6032] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 147.092186][ T29] usb usb40-port1: unable to enumerate USB device [ 147.192554][ T6032] usb 7-1: device descriptor read/8, error -71 [ 147.302344][ T6032] usb usb7-port1: unable to enumerate USB device [ 147.469933][ T7212] befs: (nullb0): No write support. Marking filesystem read-only [ 147.476476][ T7212] befs: (nullb0): invalid magic header [ 148.327095][ T7218] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 148.330415][ T7218] netlink: 224 bytes leftover after parsing attributes in process `syz.0.327'. [ 148.344571][ T7218] 9pnet_fd: Insufficient options for proto=fd [ 148.825447][ T7235] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 148.827555][ T7235] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 148.830635][ T7235] vhci_hcd vhci_hcd.0: Device attached [ 149.192248][ T29] usb 44-1: SetAddress Request (10) to port 0 [ 149.194558][ T29] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 149.412124][ T7236] vhci_hcd: connection reset by peer [ 149.434054][ T1139] vhci_hcd: stop threads [ 149.436596][ T1139] vhci_hcd: release socket [ 149.438966][ T1139] vhci_hcd: disconnect device [ 150.919288][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 151.082733][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 151.858625][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'. [ 151.937444][ T7271] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.727086][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.343'. [ 152.881775][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 153.372141][ T4217] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 153.679653][ T4217] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 153.682963][ T4217] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.685722][ T4217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.252509][ T29] usb 44-1: device descriptor read/8, error -110 [ 154.655788][ T29] usb usb44-port1: attempt power cycle [ 156.238798][ T29] usb usb44-port1: unable to enumerate USB device [ 156.547045][ T7329] ptrace attach of ""[7330] was attempted by "/syz-executor exec"[7329] [ 156.557676][ T7329] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 156.564717][ T7329] netlink: 224 bytes leftover after parsing attributes in process `syz.1.352'. [ 156.658206][ T29] usb 5-1: USB disconnect, device number 2 [ 158.505724][ T7353] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.601676][ T7352] befs: (nullb0): No write support. Marking filesystem read-only [ 158.604511][ T7352] befs: (nullb0): invalid magic header [ 160.373770][ T7372] ptrace attach of ""[7373] was attempted by "/syz-executor exec"[7372] [ 160.378106][ T7372] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 160.380534][ T7372] netlink: 224 bytes leftover after parsing attributes in process `syz.2.364'. [ 160.492186][ T7374] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.096843][ T7384] befs: (nullb0): No write support. Marking filesystem read-only [ 161.100295][ T7384] befs: (nullb0): invalid magic header [ 162.567863][ T7405] ptrace attach of ""[7407] was attempted by "/syz-executor exec"[7405] [ 162.587031][ T7405] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 162.590260][ T7405] netlink: 224 bytes leftover after parsing attributes in process `syz.3.371'. [ 164.485967][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 165.916085][ T7439] ptrace attach of ""[7440] was attempted by "/syz-executor exec"[7439] [ 165.923348][ T7439] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 165.929047][ T7439] netlink: 224 bytes leftover after parsing attributes in process `syz.3.376'. [ 166.737340][ T7448] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.435927][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 170.253068][ T5950] Bluetooth: hci3: command 0x0406 tx timeout [ 171.027783][ T7482] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 171.030509][ T7482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 171.047956][ T7482] vhci_hcd vhci_hcd.0: Device attached [ 171.372558][ T6025] usb 42-1: SetAddress Request (14) to port 0 [ 171.375440][ T6025] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 171.468064][ T7483] vhci_hcd: connection reset by peer [ 171.470762][ T1174] vhci_hcd: stop threads [ 171.472690][ T1174] vhci_hcd: release socket [ 171.488496][ T1174] vhci_hcd: disconnect device [ 171.811780][ T7491] ptrace attach of ""[7492] was attempted by "/syz-executor exec"[7491] [ 171.816211][ T7491] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 171.818591][ T7491] netlink: 224 bytes leftover after parsing attributes in process `syz.0.393'. [ 175.538034][ T7514] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 175.540397][ T7514] netlink: 224 bytes leftover after parsing attributes in process `syz.3.401'. [ 176.754611][ T3243] kernel read not supported for file /dsp (pid: 3243 comm: kworker/2:2) [ 176.827808][ T6025] usb 42-1: device descriptor read/8, error -110 [ 177.246836][ T7531] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 177.249610][ T7531] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.253729][ T7531] vhci_hcd vhci_hcd.0: Device attached [ 177.303251][ T6025] usb usb42-port1: attempt power cycle [ 177.383063][ T7537] ptrace attach of ""[7538] was attempted by "/syz-executor exec"[7537] [ 177.394585][ T7537] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 177.397836][ T7537] netlink: 224 bytes leftover after parsing attributes in process `syz.0.403'. [ 177.742180][ T29] usb 44-1: SetAddress Request (14) to port 0 [ 177.744284][ T29] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 177.922653][ T6025] usb usb42-port1: unable to enumerate USB device [ 178.632108][ T7534] vhci_hcd: connection reset by peer [ 178.645815][ T46] vhci_hcd: stop threads [ 178.647715][ T46] vhci_hcd: release socket [ 178.649736][ T46] vhci_hcd: disconnect device [ 179.313150][ T7548] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 179.315241][ T7548] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.317796][ T7548] vhci_hcd vhci_hcd.0: Device attached [ 179.482775][ T7553] vhci_hcd: connection closed [ 179.483553][ T166] vhci_hcd: stop threads [ 179.486419][ T166] vhci_hcd: release socket [ 179.488499][ T166] vhci_hcd: disconnect device [ 181.376626][ T7567] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 183.112369][ T29] usb 44-1: device descriptor read/8, error -110 [ 183.112845][ T7583] befs: (nullb0): No write support. Marking filesystem read-only [ 183.152386][ T7583] befs: (nullb0): invalid magic header [ 183.523382][ T29] usb usb44-port1: attempt power cycle [ 184.682603][ T29] usb usb44-port1: unable to enumerate USB device [ 184.693647][ T7600] befs: (nullb0): No write support. Marking filesystem read-only [ 184.697152][ T7600] befs: (nullb0): invalid magic header [ 185.627755][ T7622] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 185.629917][ T7622] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 185.633303][ T7622] vhci_hcd vhci_hcd.0: Device attached [ 186.092164][ T29] usb 44-1: SetAddress Request (18) to port 0 [ 186.094778][ T29] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 187.441325][ T7623] vhci_hcd: connection reset by peer [ 187.475340][ T166] vhci_hcd: stop threads [ 187.477223][ T166] vhci_hcd: release socket [ 187.479893][ T166] vhci_hcd: disconnect device [ 188.706288][ T7657] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 188.708743][ T7657] netlink: 224 bytes leftover after parsing attributes in process `syz.1.440'. [ 188.718897][ T7658] ptrace attach of ""[7659] was attempted by "/syz-executor exec"[7658] [ 188.724215][ T7658] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 188.726767][ T7658] netlink: 224 bytes leftover after parsing attributes in process `syz.0.437'. [ 189.228456][ T6004] kernel read not supported for file /dsp (pid: 6004 comm: kworker/2:3) [ 190.849016][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 191.512953][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 191.655012][ T7696] befs: (nullb0): No write support. Marking filesystem read-only [ 191.657608][ T7696] befs: (nullb0): invalid magic header [ 192.134261][ T29] usb 44-1: device descriptor read/8, error -110 [ 192.437187][ T7709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 192.439959][ T7709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.470067][ T7709] vhci_hcd vhci_hcd.0: Device attached [ 192.662756][ T29] usb usb44-port1: attempt power cycle [ 192.666311][ T7715] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 192.668397][ T7715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.670981][ T7715] vhci_hcd vhci_hcd.0: Device attached [ 192.752329][ T4217] usb 38-1: SetAddress Request (6) to port 0 [ 192.763571][ T4217] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 192.972233][ T6025] usb 40-1: SetAddress Request (6) to port 0 [ 193.126766][ T6025] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 193.222456][ T7721] ptrace attach of ""[7722] was attempted by "/syz-executor exec"[7721] [ 193.233825][ T7721] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 193.237043][ T7721] netlink: 224 bytes leftover after parsing attributes in process `syz.3.455'. [ 193.429725][ T29] usb usb44-port1: unable to enumerate USB device [ 193.583464][ T7710] vhci_hcd: connection reset by peer [ 193.591656][ T166] vhci_hcd: stop threads [ 193.593291][ T166] vhci_hcd: release socket [ 193.594739][ T166] vhci_hcd: disconnect device [ 193.630223][ T7716] vhci_hcd: connection reset by peer [ 193.649921][ T13] vhci_hcd: stop threads [ 193.651712][ T13] vhci_hcd: release socket [ 193.653619][ T13] vhci_hcd: disconnect device [ 193.787609][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 196.105540][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 197.141989][ T7750] befs: (nullb0): No write support. Marking filesystem read-only [ 197.173793][ T7750] befs: (nullb0): invalid magic header [ 198.042842][ T4217] usb 38-1: device descriptor read/8, error -110 [ 198.172205][ T6025] usb 40-1: device descriptor read/8, error -110 [ 198.815518][ T6025] usb usb40-port1: attempt power cycle [ 198.987421][ T4217] usb usb38-port1: attempt power cycle [ 199.427995][ T7763] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 199.430049][ T7763] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.492451][ T7763] vhci_hcd vhci_hcd.0: Device attached [ 199.552783][ T6025] usb usb40-port1: unable to enumerate USB device [ 199.584989][ T4217] usb usb38-port1: unable to enumerate USB device [ 199.762124][ T29] usb 42-1: SetAddress Request (19) to port 0 [ 199.764198][ T29] usb 42-1: new SuperSpeed USB device number 19 using vhci_hcd [ 200.046290][ T7764] vhci_hcd: connection reset by peer [ 200.059505][ T1148] vhci_hcd: stop threads [ 200.061395][ T1148] vhci_hcd: release socket [ 200.089819][ T1148] vhci_hcd: disconnect device [ 200.236132][ T7773] ptrace attach of ""[7774] was attempted by "/syz-executor exec"[7773] [ 200.244143][ T7773] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 200.246628][ T7773] netlink: 224 bytes leftover after parsing attributes in process `syz.3.468'. [ 201.388307][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 201.679253][ T7789] befs: (nullb0): No write support. Marking filesystem read-only [ 201.715853][ T7789] befs: (nullb0): invalid magic header [ 201.838322][ T7772] sp0: Synchronizing with TNC [ 205.366960][ T29] usb 42-1: device descriptor read/8, error -110 [ 205.562436][ T7809] befs: (nullb0): No write support. Marking filesystem read-only [ 205.565008][ T7809] befs: (nullb0): invalid magic header [ 205.782636][ T29] usb usb42-port1: attempt power cycle [ 205.848141][ T7817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 205.850230][ T7817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.857396][ T7817] vhci_hcd vhci_hcd.0: Device attached [ 206.193350][ T4217] usb 44-1: SetAddress Request (22) to port 0 [ 206.195360][ T4217] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 206.345108][ T29] usb usb42-port1: unable to enumerate USB device [ 206.486882][ T7818] vhci_hcd: connection reset by peer [ 206.489368][ T13] vhci_hcd: stop threads [ 206.490737][ T13] vhci_hcd: release socket [ 206.496153][ T13] vhci_hcd: disconnect device [ 206.713170][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 206.780837][ T7829] befs: (nullb0): No write support. Marking filesystem read-only [ 206.792144][ T7829] befs: (nullb0): invalid magic header [ 207.643345][ T6025] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 207.703450][ T7840] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 207.706285][ T7840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.713799][ T7840] vhci_hcd vhci_hcd.0: Device attached [ 207.827811][ T6025] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.831725][ T6025] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.836063][ T6025] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.840329][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.102167][ T6025] usb 5-1: usb_control_msg returned -32 [ 208.104085][ T6025] usbtmc 5-1:16.0: can't read capabilities [ 208.271265][ T7842] vhci_hcd: connection closed [ 208.274655][ T12] vhci_hcd: stop threads [ 208.282720][ T12] vhci_hcd: release socket [ 208.285308][ T12] vhci_hcd: disconnect device [ 208.479721][ T7848] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 208.802164][ T7723] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 208.954758][ T7723] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.959005][ T7723] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.965199][ T7723] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.969173][ T7723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.194711][ T7723] usb 6-1: usb_control_msg returned -32 [ 209.197319][ T7723] usbtmc 6-1:16.0: can't read capabilities [ 209.629504][ T7868] befs: (nullb0): No write support. Marking filesystem read-only [ 209.633301][ T7868] befs: (nullb0): invalid magic header [ 210.121075][ T7872] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 210.123784][ T7872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 210.127605][ T7872] vhci_hcd vhci_hcd.0: Device attached [ 210.508358][ T7878] Zero length message leads to an empty skb [ 210.510872][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 210.970470][ T7873] vhci_hcd: connection closed [ 210.970623][ T12] vhci_hcd: stop threads [ 210.974663][ T12] vhci_hcd: release socket [ 210.976653][ T12] vhci_hcd: disconnect device [ 211.292145][ T4217] usb 44-1: device descriptor read/8, error -110 [ 211.693721][ T4217] usb usb44-port1: attempt power cycle [ 212.280832][ T4217] usb usb44-port1: unable to enumerate USB device [ 212.682799][ T7894] befs: (nullb0): No write support. Marking filesystem read-only [ 212.686549][ T7894] befs: (nullb0): invalid magic header [ 213.660488][ T7905] befs: (nullb0): No write support. Marking filesystem read-only [ 213.664066][ T7905] befs: (nullb0): invalid magic header [ 213.696867][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 214.582313][ T7864] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 214.603698][ T3243] usb 5-1: USB disconnect, device number 3 [ 214.635535][ T54] usb 6-1: USB disconnect, device number 2 [ 214.741794][ T7921] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 214.744090][ T7921] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.749683][ T7921] vhci_hcd vhci_hcd.0: Device attached [ 215.534686][ T7922] vhci_hcd: connection closed [ 215.537193][ T46] vhci_hcd: stop threads [ 215.540443][ T46] vhci_hcd: release socket [ 215.541983][ T46] vhci_hcd: disconnect device [ 215.552147][ T4217] usb 42-1: enqueue for inactive port 0 [ 215.688821][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 215.811212][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 216.413520][ T4217] usb usb42-port1: attempt power cycle [ 216.822306][ T7947] ptrace attach of ""[7948] was attempted by "/syz-executor exec"[7947] [ 216.833161][ T7947] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 216.841072][ T7950] befs: (nullb0): No write support. Marking filesystem read-only [ 216.842229][ T7947] netlink: 224 bytes leftover after parsing attributes in process `syz.3.512'. [ 216.843884][ T7950] befs: (nullb0): invalid magic header [ 217.003114][ T4217] usb usb42-port1: unable to enumerate USB device [ 217.520625][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 218.525426][ T7970] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 218.528052][ T7970] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.531279][ T7970] vhci_hcd vhci_hcd.0: Device attached [ 218.802154][ T4217] usb 40-1: SetAddress Request (10) to port 0 [ 218.804698][ T4217] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 219.165981][ T7971] vhci_hcd: connection reset by peer [ 219.887282][ T1141] vhci_hcd: stop threads [ 219.888674][ T1141] vhci_hcd: release socket [ 219.890114][ T1141] vhci_hcd: disconnect device [ 222.178321][ T7999] bridge: RTM_NEWNEIGH with invalid ether address [ 222.222458][ T8001] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 222.225160][ T8001] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.243595][ T8001] vhci_hcd vhci_hcd.0: Device attached [ 222.461234][ T8002] vhci_hcd: connection closed [ 222.465373][ T1174] vhci_hcd: stop threads [ 222.512134][ T29] usb 44-1: SetAddress Request (26) to port 0 [ 222.514630][ T29] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 222.521533][ T1174] vhci_hcd: release socket [ 222.549286][ T1174] vhci_hcd: disconnect device [ 223.863191][ T4217] usb 40-1: device descriptor read/8, error -110 [ 225.184382][ T4217] usb usb40-port1: attempt power cycle [ 227.432616][ T4217] usb usb40-port1: unable to enumerate USB device [ 227.492172][ T6004] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 227.508331][ T8041] bridge: RTM_NEWNEIGH with invalid ether address [ 227.622138][ T29] usb 44-1: device descriptor read/8, error -110 [ 228.202673][ T29] usb usb44-port1: attempt power cycle [ 228.326666][ T6004] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.330574][ T6004] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.797844][ T29] usb usb44-port1: unable to enumerate USB device [ 228.842119][ T6004] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.851519][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.072274][ T6004] usb 7-1: usb_control_msg returned -32 [ 229.074801][ T6004] usbtmc 7-1:16.0: can't read capabilities [ 229.431893][ T8062] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 230.632806][ T54] usb 7-1: USB disconnect, device number 6 [ 231.201087][ T8087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 231.203738][ T8087] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.209539][ T8087] vhci_hcd vhci_hcd.0: Device attached [ 231.492179][ T29] usb 38-1: SetAddress Request (10) to port 0 [ 231.494922][ T29] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 232.232187][ T1020] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 232.309678][ T8088] vhci_hcd: connection reset by peer [ 232.312243][ T12] vhci_hcd: stop threads [ 232.314937][ T12] vhci_hcd: release socket [ 232.325041][ T12] vhci_hcd: disconnect device [ 232.385748][ T1020] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.389942][ T1020] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.399039][ T1020] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.403873][ T1020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.697174][ T1020] usb 6-1: usb_control_msg returned -32 [ 232.699000][ T1020] usbtmc 6-1:16.0: can't read capabilities [ 233.050063][ T8105] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 233.124780][ T8107] bridge: RTM_NEWNEIGH with invalid ether address [ 233.495479][ T8113] befs: (nullb0): No write support. Marking filesystem read-only [ 233.499014][ T8113] befs: (nullb0): invalid magic header [ 234.471420][ T8122] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 234.473616][ T8122] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.482081][ T8122] vhci_hcd vhci_hcd.0: Device attached [ 234.746808][ T4217] usb 44-1: SetAddress Request (30) to port 0 [ 234.749697][ T4217] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 234.919224][ T7723] usb 6-1: USB disconnect, device number 3 [ 235.160062][ T8123] vhci_hcd: connection reset by peer [ 235.163452][ T12] vhci_hcd: stop threads [ 235.165141][ T12] vhci_hcd: release socket [ 235.167012][ T12] vhci_hcd: disconnect device [ 236.572157][ T29] usb 38-1: device descriptor read/8, error -110 [ 237.028154][ T29] usb usb38-port1: attempt power cycle [ 237.813623][ T29] usb usb38-port1: unable to enumerate USB device [ 238.503239][ T8162] ptrace attach of ""[8163] was attempted by "/syz-executor exec"[8162] [ 238.512764][ T8162] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 238.522091][ T8162] netlink: 224 bytes leftover after parsing attributes in process `syz.1.568'. [ 239.072368][ T8173] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 239.075179][ T8173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.083698][ T8173] vhci_hcd vhci_hcd.0: Device attached [ 239.382212][ T29] usb 42-1: SetAddress Request (27) to port 0 [ 239.384858][ T29] usb 42-1: new SuperSpeed USB device number 27 using vhci_hcd [ 239.806813][ T8174] vhci_hcd: connection reset by peer [ 239.828720][ T1141] vhci_hcd: stop threads [ 239.830515][ T1141] vhci_hcd: release socket [ 239.834222][ T1141] vhci_hcd: disconnect device [ 239.860593][ T4217] usb 44-1: device descriptor read/8, error -110 [ 240.334413][ T4217] usb usb44-port1: attempt power cycle [ 240.963784][ T4217] usb usb44-port1: unable to enumerate USB device [ 242.293589][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 243.032638][ T8204] ptrace attach of ""[8205] was attempted by "/syz-executor exec"[8204] [ 243.054526][ T8204] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 243.056950][ T8204] netlink: 224 bytes leftover after parsing attributes in process `syz.1.580'. [ 244.109071][ T8208] bridge: RTM_NEWNEIGH with invalid ether address [ 244.435077][ T8220] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 244.437173][ T8220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 244.440003][ T8220] vhci_hcd vhci_hcd.0: Device attached [ 244.492118][ T29] usb 42-1: device descriptor read/8, error -110 [ 244.681661][ T8226] ptrace attach of ""[8227] was attempted by "/syz-executor exec"[8226] [ 244.701719][ T8226] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 244.705281][ T7723] usb 38-1: SetAddress Request (14) to port 0 [ 244.707407][ T7723] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 244.709919][ T6007] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 244.720469][ T8226] netlink: 224 bytes leftover after parsing attributes in process `syz.2.584'. [ 244.996741][ T29] usb usb42-port1: attempt power cycle [ 245.004493][ T6007] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.008568][ T6007] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.022810][ T6007] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.026464][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.233059][ T8221] vhci_hcd: connection reset by peer [ 245.236926][ T12] vhci_hcd: stop threads [ 245.252156][ T12] vhci_hcd: release socket [ 245.253813][ T12] vhci_hcd: disconnect device [ 245.366422][ T6007] usb 6-1: usb_control_msg returned -32 [ 245.368266][ T6007] usbtmc 6-1:16.0: can't read capabilities [ 245.672831][ T29] usb usb42-port1: unable to enumerate USB device [ 247.045415][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 247.509789][ T54] usb 6-1: USB disconnect, device number 4 [ 249.383268][ T8268] befs: (nullb0): No write support. Marking filesystem read-only [ 249.385669][ T8268] befs: (nullb0): invalid magic header [ 249.502187][ T8267] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 249.504581][ T8267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.507560][ T8267] vhci_hcd vhci_hcd.0: Device attached [ 249.664808][ T8271] bridge: RTM_NEWNEIGH with invalid ether address [ 249.772525][ T7723] usb 38-1: device descriptor read/8, error -110 [ 249.864127][ T6025] usb 44-1: SetAddress Request (34) to port 0 [ 249.867001][ T6025] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd [ 249.918568][ T8272] vhci_hcd: connection reset by peer [ 249.937088][ T12] vhci_hcd: stop threads [ 249.939283][ T12] vhci_hcd: release socket [ 249.941135][ T12] vhci_hcd: disconnect device [ 250.637953][ T7723] usb usb38-port1: attempt power cycle [ 251.612515][ T7723] usb usb38-port1: unable to enumerate USB device [ 255.242439][ T6025] usb 44-1: device descriptor read/8, error -110 [ 255.819257][ T8314] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.952995][ T6025] usb usb44-port1: attempt power cycle [ 256.289175][ T8326] ptrace attach of ""[8327] was attempted by "/syz-executor exec"[8326] [ 256.319669][ T8326] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 256.322832][ T8326] netlink: 224 bytes leftover after parsing attributes in process `syz.3.616'. [ 256.362302][ T3243] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 256.563973][ T3243] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.567170][ T3243] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.571157][ T3243] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.573608][ T6025] usb usb44-port1: unable to enumerate USB device [ 256.576963][ T3243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.793668][ T3243] usb 5-1: usb_control_msg returned -32 [ 256.795878][ T3243] usbtmc 5-1:16.0: can't read capabilities [ 257.198056][ T8339] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 257.200761][ T8339] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 257.206136][ T8339] vhci_hcd vhci_hcd.0: Device attached [ 257.373592][ T8347] befs: (nullb0): No write support. Marking filesystem read-only [ 257.379024][ T8347] befs: (nullb0): invalid magic header [ 257.512255][ T6025] usb 42-1: SetAddress Request (31) to port 0 [ 257.548009][ T6025] usb 42-1: new SuperSpeed USB device number 31 using vhci_hcd [ 257.819795][ T8340] vhci_hcd: connection reset by peer [ 257.822785][ T60] vhci_hcd: stop threads [ 257.832127][ T60] vhci_hcd: release socket [ 257.833612][ T60] vhci_hcd: disconnect device [ 258.295228][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 258.722409][ T8362] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 259.101555][ T3243] usb 5-1: USB disconnect, device number 4 [ 259.216970][ T8367] befs: (nullb0): No write support. Marking filesystem read-only [ 259.219702][ T8367] befs: (nullb0): invalid magic header [ 259.512797][ T8374] befs: (nullb0): No write support. Marking filesystem read-only [ 259.516685][ T8374] befs: (nullb0): invalid magic header [ 259.692216][ T6032] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 259.844157][ T6032] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.848360][ T6032] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.853762][ T6032] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.857516][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.069684][ T6032] usb 6-1: usb_control_msg returned -32 [ 260.072294][ T6032] usbtmc 6-1:16.0: can't read capabilities [ 260.594261][ T8384] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.695496][ T8386] bridge: RTM_NEWNEIGH with invalid ether address [ 261.409013][ T8390] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 261.411825][ T8390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 261.420050][ T8390] vhci_hcd vhci_hcd.0: Device attached [ 261.692236][ T7723] usb 44-1: SetAddress Request (38) to port 0 [ 261.694343][ T7723] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd [ 262.030135][ T8391] vhci_hcd: connection reset by peer [ 262.033288][ T46] vhci_hcd: stop threads [ 262.039458][ T46] vhci_hcd: release socket [ 262.045192][ T46] vhci_hcd: disconnect device [ 262.450020][ T34] usb 6-1: USB disconnect, device number 5 [ 263.576773][ T6025] usb 42-1: device descriptor read/8, error -110 [ 263.785085][ T8411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 263.787292][ T8411] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 263.790034][ T8411] vhci_hcd vhci_hcd.0: Device attached [ 264.146883][ T6025] usb usb42-port1: attempt power cycle [ 264.596426][ T8412] vhci_hcd: connection closed [ 264.600225][ T46] vhci_hcd: stop threads [ 264.607442][ T46] vhci_hcd: release socket [ 264.610540][ T46] vhci_hcd: disconnect device [ 264.743201][ T6025] usb usb42-port1: unable to enumerate USB device [ 266.102336][ T5979] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 266.302748][ T8444] bridge: RTM_NEWNEIGH with invalid ether address [ 266.324575][ T5979] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.328770][ T5979] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.334425][ T5979] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.338559][ T5979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.385699][ T8445] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 266.387831][ T8445] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 266.394843][ T8445] vhci_hcd vhci_hcd.0: Device attached [ 266.639920][ T5979] usb 8-1: usb_control_msg returned -32 [ 266.651806][ T5979] usbtmc 8-1:16.0: can't read capabilities [ 266.672599][ T6025] usb 40-1: SetAddress Request (14) to port 0 [ 266.679926][ T6025] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 266.732134][ T7723] usb 44-1: device descriptor read/8, error -110 [ 266.884531][ T8450] befs: (nullb0): No write support. Marking filesystem read-only [ 266.887817][ T8450] befs: (nullb0): invalid magic header [ 267.012155][ T8446] vhci_hcd: connection reset by peer [ 267.014407][ T166] vhci_hcd: stop threads [ 267.016293][ T166] vhci_hcd: release socket [ 267.018279][ T166] vhci_hcd: disconnect device [ 267.142544][ T7723] usb usb44-port1: attempt power cycle [ 267.763467][ T7723] usb usb44-port1: unable to enumerate USB device [ 268.815166][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 268.872122][ T3243] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 268.878311][ T6024] usb 8-1: USB disconnect, device number 2 [ 269.043357][ T3243] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.046452][ T3243] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.050532][ T3243] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.053480][ T3243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.295949][ T3243] usb 6-1: usb_control_msg returned -32 [ 269.297698][ T3243] usbtmc 6-1:16.0: can't read capabilities [ 269.752149][ T5979] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 269.903942][ T5979] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.912198][ T5979] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.917699][ T5979] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.931759][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.090825][ T8491] bridge: RTM_NEWNEIGH with invalid ether address [ 270.150717][ T5979] usb 7-1: usb_control_msg returned -32 [ 270.153934][ T5979] usbtmc 7-1:16.0: can't read capabilities [ 271.273889][ T8500] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 271.275988][ T8500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 271.278821][ T8500] vhci_hcd vhci_hcd.0: Device attached [ 271.552205][ T29] usb 44-1: SetAddress Request (42) to port 0 [ 271.554242][ T29] usb 44-1: new SuperSpeed USB device number 42 using vhci_hcd [ 271.772205][ T6025] usb 40-1: device descriptor read/8, error -110 [ 271.889689][ T8501] vhci_hcd: connection reset by peer [ 271.892508][ T1141] vhci_hcd: stop threads [ 271.893949][ T1141] vhci_hcd: release socket [ 271.895567][ T1141] vhci_hcd: disconnect device [ 272.178483][ T6025] usb usb40-port1: attempt power cycle [ 272.762599][ T6025] usb usb40-port1: unable to enumerate USB device [ 275.423577][ T8533] bridge: RTM_NEWNEIGH with invalid ether address [ 275.532812][ T8495] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 275.546580][ T5979] usb 6-1: USB disconnect, device number 6 [ 275.805086][ T34] usb 7-1: USB disconnect, device number 7 [ 276.157643][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 276.672250][ T29] usb 44-1: device descriptor read/8, error -110 [ 277.062726][ T29] usb usb44-port1: attempt power cycle [ 277.633755][ T29] usb usb44-port1: unable to enumerate USB device [ 278.019682][ T8562] befs: (nullb0): No write support. Marking filesystem read-only [ 278.023738][ T8562] befs: (nullb0): invalid magic header [ 278.050778][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 280.243317][ T8585] befs: (nullb0): No write support. Marking filesystem read-only [ 280.246847][ T8585] befs: (nullb0): invalid magic header [ 281.349022][ T8601] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 281.768223][ T8605] ptrace attach of ""[8606] was attempted by "/syz-executor exec"[8605] [ 283.930521][ T8604] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 283.965592][ T8604] netlink: 224 bytes leftover after parsing attributes in process `syz.1.689'. [ 285.079102][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 285.794070][ T8641] bridge: RTM_NEWNEIGH with invalid ether address [ 286.390163][ T8649] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.876317][ T8656] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 286.878774][ T8656] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.081079][ T8656] vhci_hcd vhci_hcd.0: Device attached [ 287.352251][ T6025] usb 42-1: SetAddress Request (35) to port 0 [ 287.355038][ T6025] usb 42-1: new SuperSpeed USB device number 35 using vhci_hcd [ 287.932412][ T8657] vhci_hcd: connection reset by peer [ 287.935488][ T1178] vhci_hcd: stop threads [ 287.936862][ T1178] vhci_hcd: release socket [ 287.938371][ T1178] vhci_hcd: disconnect device [ 289.282474][ T8681] ptrace attach of ""[8682] was attempted by "/syz-executor exec"[8681] [ 289.287095][ T8681] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 289.289500][ T8681] netlink: 224 bytes leftover after parsing attributes in process `syz.3.709'. [ 289.415326][ T8684] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 289.417428][ T8684] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.433140][ T8684] vhci_hcd vhci_hcd.0: Device attached [ 289.702239][ T6007] usb 40-1: SetAddress Request (18) to port 0 [ 289.704431][ T6007] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 290.332264][ T8685] vhci_hcd: connection reset by peer [ 290.335012][ T12] vhci_hcd: stop threads [ 290.336397][ T12] vhci_hcd: release socket [ 290.337868][ T12] vhci_hcd: disconnect device [ 290.448350][ T8697] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 290.450939][ T8697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.462237][ T8697] vhci_hcd vhci_hcd.0: Device attached [ 290.732560][ T29] usb 44-1: SetAddress Request (46) to port 0 [ 291.301028][ T29] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 291.774072][ T8713] befs: (nullb0): No write support. Marking filesystem read-only [ 291.776683][ T8713] befs: (nullb0): invalid magic header [ 292.422133][ T6025] usb 42-1: device descriptor read/8, error -110 [ 292.444795][ T8698] vhci_hcd: connection reset by peer [ 292.446897][ T60] vhci_hcd: stop threads [ 292.448159][ T60] vhci_hcd: release socket [ 292.449485][ T60] vhci_hcd: disconnect device [ 292.813190][ T8725] ptrace attach of ""[8726] was attempted by "/syz-executor exec"[8725] [ 292.831474][ T8725] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 292.835306][ T8725] netlink: 224 bytes leftover after parsing attributes in process `syz.1.721'. [ 293.402320][ T8731] befs: (nullb0): No write support. Marking filesystem read-only [ 293.405959][ T8731] befs: (nullb0): invalid magic header [ 293.495039][ T8734] bridge: RTM_NEWNEIGH with invalid ether address [ 293.582959][ T6025] usb usb42-port1: attempt power cycle [ 294.672684][ T6025] usb usb42-port1: unable to enumerate USB device [ 295.152890][ T8757] befs: (nullb0): No write support. Marking filesystem read-only [ 295.155542][ T8757] befs: (nullb0): invalid magic header [ 295.274479][ T6007] usb 40-1: device descriptor read/8, error -110 [ 295.702590][ T6007] usb usb40-port1: attempt power cycle [ 296.262678][ T6007] usb usb40-port1: unable to enumerate USB device [ 296.422297][ T8776] ptrace attach of ""[8777] was attempted by "/syz-executor exec"[8776] [ 296.430110][ T8776] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 296.433477][ T8776] netlink: 224 bytes leftover after parsing attributes in process `syz.3.733'. [ 296.592117][ T29] usb 44-1: device descriptor read/8, error -110 [ 296.997202][ T29] usb usb44-port1: attempt power cycle [ 298.993245][ T29] usb usb44-port1: unable to enumerate USB device [ 299.990066][ T8798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 301.203178][ T8813] ptrace attach of ""[8814] was attempted by "/syz-executor exec"[8813] [ 301.214763][ T8813] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 301.220258][ T8813] netlink: 224 bytes leftover after parsing attributes in process `syz.2.741'. [ 301.394105][ T8820] bridge: RTM_NEWNEIGH with invalid ether address [ 301.463501][ T8822] befs: (nullb0): No write support. Marking filesystem read-only [ 301.466546][ T8822] befs: (nullb0): invalid magic header [ 302.700678][ T8830] ptrace attach of ""[8831] was attempted by "/syz-executor exec"[8830] [ 302.705169][ T8830] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 302.707654][ T8830] netlink: 224 bytes leftover after parsing attributes in process `syz.1.746'. [ 305.335089][ T8853] bridge: RTM_NEWNEIGH with invalid ether address [ 307.662144][ T8872] befs: (nullb0): No write support. Marking filesystem read-only [ 307.665277][ T8872] befs: (nullb0): invalid magic header [ 308.002345][ T8875] befs: (nullb0): No write support. Marking filesystem read-only [ 308.004954][ T8875] befs: (nullb0): invalid magic header [ 308.658664][ T8882] ptrace attach of ""[8884] was attempted by "/syz-executor exec"[8882] [ 309.513749][ T8882] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 309.516855][ T8882] netlink: 224 bytes leftover after parsing attributes in process `syz.1.760'. [ 311.177485][ T8898] ptrace attach of ""[8901] was attempted by "/syz-executor exec"[8898] [ 311.184536][ T8898] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 311.186981][ T8898] netlink: 224 bytes leftover after parsing attributes in process `syz.2.763'. [ 312.013756][ T8909] bridge: RTM_NEWNEIGH with invalid ether address [ 312.526446][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 312.832165][ T5979] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 312.994949][ T5979] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.999551][ T5979] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.009316][ T5979] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.013340][ T5979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.245035][ T5979] usb 8-1: GET_CAPABILITIES returned 0 [ 313.249841][ T5979] usbtmc 8-1:16.0: can't read capabilities [ 318.505847][ T8920] usbtmc 8-1:16.0: usb_control_msg returned -110 [ 318.546760][ T1020] usb 8-1: USB disconnect, device number 3 [ 318.576539][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 318.849973][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'. [ 320.930607][ T8994] bridge: RTM_NEWNEIGH with invalid ether address [ 321.802230][ T9001] ptrace attach of ""[9005] was attempted by "/syz-executor exec"[9001] [ 322.113981][ T9001] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 322.116401][ T9001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.790'. [ 323.530441][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 323.648368][ T9008] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 323.651035][ T9008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 323.654608][ T9008] vhci_hcd vhci_hcd.0: Device attached [ 324.507898][ T9020] vhci_hcd: connection closed [ 324.509514][ T46] vhci_hcd: stop threads [ 324.522125][ T29] usb 44-1: SetAddress Request (50) to port 0 [ 324.524466][ T29] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd [ 324.544731][ T46] vhci_hcd: release socket [ 324.585478][ T46] vhci_hcd: disconnect device [ 327.142855][ T9042] ptrace attach of ""[9043] was attempted by "/syz-executor exec"[9042] [ 327.163325][ T9042] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 327.165807][ T9042] netlink: 224 bytes leftover after parsing attributes in process `syz.3.803'. [ 329.690997][ T29] usb 44-1: device descriptor read/8, error -110 [ 330.027256][ T9071] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 330.030130][ T9071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.073110][ T9071] vhci_hcd vhci_hcd.0: Device attached [ 330.103064][ T29] usb usb44-port1: attempt power cycle [ 330.332333][ T61] usb 38-1: SetAddress Request (18) to port 0 [ 330.334402][ T61] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 330.672664][ T29] usb usb44-port1: unable to enumerate USB device [ 330.803143][ T9072] vhci_hcd: connection reset by peer [ 330.805111][ T91] vhci_hcd: stop threads [ 330.806620][ T91] vhci_hcd: release socket [ 330.808168][ T91] vhci_hcd: disconnect device [ 331.068156][ T9088] ptrace attach of ""[9089] was attempted by "/syz-executor exec"[9088] [ 331.072106][ T9088] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 331.074896][ T9088] netlink: 224 bytes leftover after parsing attributes in process `syz.2.815'. [ 331.159653][ T9092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 331.161739][ T9092] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 331.164537][ T9092] vhci_hcd vhci_hcd.0: Device attached [ 331.383021][ T9096] ptrace attach of ""[9097] was attempted by "/syz-executor exec"[9096] [ 331.415349][ T9096] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 331.417855][ T9096] netlink: 224 bytes leftover after parsing attributes in process `syz.3.817'. [ 331.522195][ T6007] usb 40-1: SetAddress Request (22) to port 0 [ 331.524299][ T6007] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 331.636845][ T9101] bridge: RTM_NEWNEIGH with invalid ether address [ 331.872578][ T9093] vhci_hcd: connection reset by peer [ 331.874817][ T91] vhci_hcd: stop threads [ 331.876224][ T91] vhci_hcd: release socket [ 331.877894][ T91] vhci_hcd: disconnect device [ 334.929065][ T9134] befs: (nullb0): No write support. Marking filesystem read-only [ 334.931519][ T9134] befs: (nullb0): invalid magic header [ 335.383705][ T61] usb 38-1: device descriptor read/8, error -110 [ 335.506941][ T9144] befs: (nullb0): No write support. Marking filesystem read-only [ 335.510265][ T9144] befs: (nullb0): invalid magic header [ 335.790277][ T61] usb usb38-port1: attempt power cycle [ 335.876201][ T9153] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 335.878807][ T9153] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.884772][ T9153] vhci_hcd vhci_hcd.0: Device attached [ 336.172220][ T6025] usb 44-1: SetAddress Request (54) to port 0 [ 336.174103][ T6025] usb 44-1: new SuperSpeed USB device number 54 using vhci_hcd [ 336.383860][ T61] usb usb38-port1: unable to enumerate USB device [ 336.493206][ T9154] vhci_hcd: connection reset by peer [ 336.496472][ T8897] vhci_hcd: stop threads [ 336.498050][ T8897] vhci_hcd: release socket [ 336.499707][ T8897] vhci_hcd: disconnect device [ 336.575166][ T6007] usb 40-1: device descriptor read/8, error -110 [ 336.992579][ T6007] usb usb40-port1: attempt power cycle [ 337.262261][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 337.425648][ T53] usb 6-1: config index 0 descriptor too short (expected 85, got 72) [ 337.431518][ T53] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 337.436466][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.439848][ T53] usb 6-1: Product: syz [ 337.441629][ T53] usb 6-1: Manufacturer: syz [ 337.444797][ T53] usb 6-1: SerialNumber: syz [ 337.459187][ T53] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 337.487565][ T6024] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 337.553825][ T6007] usb usb40-port1: unable to enumerate USB device [ 337.698026][ T34] usb 6-1: USB disconnect, device number 7 [ 337.812196][ T6011] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 337.962126][ T6011] usb 5-1: Using ep0 maxpacket: 32 [ 337.966023][ T6011] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 337.969529][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.978233][ T6011] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 338.572163][ T6024] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 338.574854][ T6024] ath9k_htc: Failed to initialize the device [ 338.577570][ T34] usb 6-1: ath9k_htc: USB layer deinitialized [ 338.726612][ T9233] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 338.728821][ T9233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.732913][ T9233] vhci_hcd vhci_hcd.0: Device attached [ 338.845858][ T9237] comedi comedi3: comedi_parport: I/O port conflict (0x9,3) [ 338.884238][ T9239] syzkaller0: entered promiscuous mode [ 338.886114][ T9239] syzkaller0: entered allmulticast mode [ 338.982265][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 339.183298][ T6011] gspca_nw80x: reg_w err -71 [ 339.184873][ T6011] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 339.188349][ T6011] usb 5-1: USB disconnect, device number 5 [ 339.809016][ T9234] vhci_hcd: connection reset by peer [ 339.811211][ T1174] vhci_hcd: stop threads [ 339.812720][ T1174] vhci_hcd: release socket [ 339.814333][ T1174] vhci_hcd: disconnect device [ 340.542117][ T34] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 340.598059][ T9276] netlink: 19 bytes leftover after parsing attributes in process `syz.3.882'. [ 340.704037][ T34] usb 7-1: config 2 has an invalid interface number: 136 but max is 0 [ 340.706696][ T34] usb 7-1: config 2 has no interface number 0 [ 340.708621][ T34] usb 7-1: config 2 interface 136 altsetting 7 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 340.711873][ T34] usb 7-1: config 2 interface 136 has no altsetting 0 [ 340.720551][ T34] usb 7-1: string descriptor 0 read error: -22 [ 340.722679][ T34] usb 7-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=2a.c5 [ 340.725475][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.904823][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 340.935562][ T6024] usb 7-1: USB disconnect, device number 8 ÁHÒ[ 341.212218][ T6025] usb 44-1: device descriptor read/8, error -110 [ 341.605707][ T6025] usb usb44-port1: attempt power cycle [ 341.692129][ T6032] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 341.862457][ T6032] usb 6-1: Using ep0 maxpacket: 32 [ 341.866874][ T6032] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 341.869917][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.875633][ T6032] usb 6-1: config 0 descriptor?? [ 341.880844][ T6032] gspca_main: sunplus-2.14.0 probing 041e:400b [ 342.184037][ T6025] usb usb44-port1: unable to enumerate USB device [ 342.221122][ T9313] kvm: user requested TSC rate below hardware speed [ 342.328053][ T9323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.901'. [ 342.331000][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 342.525187][ T9335] netlink: 104 bytes leftover after parsing attributes in process `syz.2.907'. [ 342.575368][ T9342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.910'. [ 342.887468][ T6032] gspca_sunplus: reg_w_riv err -71 [ 342.889164][ T6032] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 342.895731][ T6032] usb 6-1: USB disconnect, device number 8 [ 343.532710][ T53] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 343.694278][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 343.698303][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 343.704717][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.707999][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.710752][ T53] usb 5-1: Product: syz [ 343.712261][ T53] usb 5-1: Manufacturer: syz [ 343.714057][ T53] usb 5-1: SerialNumber: syz [ 343.717696][ T9410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 343.892217][ T6032] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 344.043897][ T6032] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.047940][ T6032] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.053770][ T6032] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 344.057412][ T6032] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 344.060625][ T6032] usb 6-1: Product: syz [ 344.062430][ T6032] usb 6-1: Manufacturer: syz [ 344.064319][ T6032] usb 6-1: SerialNumber: syz [ 344.068198][ T6032] usb 6-1: config 0 descriptor?? [ 344.082204][ T9] vhci_hcd: vhci_device speed not set [ 344.200479][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 344.221986][ T9433] 8021q: adding VLAN 0 to HW filter on device bond12 [ 344.230627][ T9433] bond12: option ad_select: unable to set because the bond device is up [ 344.334808][ T9438] gfs2: error -5 reading superblock [ 344.342238][ T9437] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 344.344842][ T9437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 344.348396][ T9437] vhci_hcd vhci_hcd.0: Device attached [ 344.592318][ T6024] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 344.735321][ T53] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 344.737939][ T53] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 344.961614][ T53] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 344.968584][ T53] usb 5-1: USB disconnect, device number 6 [ 344.971311][ T53] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 345.121272][ T9439] vhci_hcd: connection reset by peer [ 345.124270][ T8797] vhci_hcd: stop threads [ 345.125986][ T8797] vhci_hcd: release socket [ 345.127745][ T8797] vhci_hcd: disconnect device [ 345.472563][ T34] usb 6-1: USB disconnect, device number 9 [ 345.781633][ T9465] vivid-004: disconnect [ 345.952914][ T9470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 345.955726][ T9470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 345.987155][ T9470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 345.990280][ T9470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 345.993202][ T9472] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.136141][ T9470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 346.139349][ T9470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 346.422220][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 346.557625][ T9462] vivid-004: reconnect [ 346.583446][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 346.586031][ T9] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 346.589080][ T9] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 346.592473][ T9] usb 6-1: config 220 has no interface number 2 [ 346.594400][ T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 346.598360][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 346.600415][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 346.603407][ T9] usb 6-1: config 220 interface 1 has no altsetting 0 [ 346.607131][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 346.609974][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.612668][ T9] usb 6-1: Product: syz [ 346.614012][ T9] usb 6-1: Manufacturer: syz [ 346.615452][ T9] usb 6-1: SerialNumber: syz [ 346.824974][ T9] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 346.827245][ T9] uvcvideo 6-1:220.0: No valid video chain found. [ 346.829287][ T9] usb 6-1: selecting invalid altsetting 0 [ 346.842662][ T9] usb 6-1: selecting invalid altsetting 0 [ 346.844526][ T9] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 346.852277][ T9] usb 6-1: USB disconnect, device number 10 [ 348.322479][ T9544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.961'. [ 348.726558][ T9552] trusted_key: encrypted_key: insufficient parameters specified [ 348.892247][ T53] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 349.052170][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 349.055149][ T53] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 349.058333][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.066256][ T53] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 349.364111][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 349.366986][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.967'. [ 349.682179][ T6024] vhci_hcd: vhci_device speed not set [ 350.070886][ T53] gspca_nw80x: reg_w err -71 [ 350.072490][ T53] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 350.078433][ T53] usb 5-1: USB disconnect, device number 7 [ 350.332283][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 350.335169][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 350.749626][ T9587] TCP: TCP_TX_DELAY enabled [ 351.592179][ T6011] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 351.752156][ T6011] usb 6-1: Using ep0 maxpacket: 16 [ 351.761233][ T6011] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.765872][ T6011] usb 6-1: config 0 interface 0 has no altsetting 0 [ 351.768573][ T6011] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 351.772574][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.779640][ T6011] usb 6-1: config 0 descriptor?? [ 352.202513][ T6011] nzxt-smart2 0003:1E71:2009.0002: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 352.203362][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.989'. [ 352.209053][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 352.651413][ T9] usb 6-1: USB disconnect, device number 11 [ 353.130275][ T9640] evm: overlay not supported [ 353.260023][ T9644] Bluetooth: MGMT ver 1.23 [ 353.401789][ T9656] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1002'. [ 353.408291][ T9656] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 353.515939][ T40] audit: type=1326 audit(1760796930.407:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.524516][ T40] audit: type=1326 audit(1760796930.407:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.535512][ T40] audit: type=1326 audit(1760796930.407:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.543195][ T40] audit: type=1326 audit(1760796930.407:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.550705][ T40] audit: type=1326 audit(1760796930.407:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.557601][ T40] audit: type=1326 audit(1760796930.407:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.564390][ T40] audit: type=1326 audit(1760796930.417:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.570833][ T40] audit: type=1326 audit(1760796930.417:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.592105][ T40] audit: type=1326 audit(1760796930.417:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.595143][ T9666] binder: 9665:9666 ioctl c0306201 80000540 returned -22 [ 353.598551][ T40] audit: type=1326 audit(1760796930.417:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.3.1007" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 353.710061][ T9673] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 353.732989][ T9673] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 353.919338][ T9687] syzkaller0: entered promiscuous mode [ 353.921626][ T9687] syzkaller0: entered allmulticast mode [ 354.512201][ T6032] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 354.672416][ T6032] usb 7-1: Using ep0 maxpacket: 8 [ 354.716563][ T6032] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.728367][ T6032] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 354.737357][ T6032] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 354.740818][ T6032] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.754540][ T6032] usb 7-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 354.757521][ T6032] usb 7-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 354.760225][ T6032] usb 7-1: Product: syz [ 354.761810][ T6032] usb 7-1: Manufacturer: syz [ 354.767435][ T6032] usb 7-1: SerialNumber: syz [ 354.778041][ T6032] usb 7-1: config 0 descriptor?? [ 354.814589][ T6032] smsusb:smsusb_probe: board id=2, interface number 0 [ 354.817139][ T6032] smsusb:smsusb_probe: Device initialized with return code -19 [ 354.987152][ T6032] usb 7-1: USB disconnect, device number 9 [ 355.278553][ T9737] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 355.530043][ T9744] syzkaller0: entered promiscuous mode [ 355.533506][ T9744] syzkaller0: entered allmulticast mode [ 355.743809][ T9753] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1043'. [ 356.048247][ T9764] syzkaller0: entered promiscuous mode [ 356.050844][ T9764] syzkaller0: entered allmulticast mode [ 356.066107][ T9762] kvm: apic: phys broadcast and lowest prio [ 356.215558][ T9774] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1053'. [ 356.622129][ T6011] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 356.752368][ T6011] usb 6-1: device descriptor read/64, error -71 [ 356.992304][ T6011] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 357.122220][ T6011] usb 6-1: device descriptor read/64, error -71 [ 357.235466][ T6011] usb usb6-port1: attempt power cycle [ 357.334652][ T9793] syzkaller0: entered promiscuous mode [ 357.337431][ T9793] syzkaller0: entered allmulticast mode [ 357.579477][ T9796] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1061'. [ 357.592206][ T6011] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 357.623111][ T6011] usb 6-1: device descriptor read/8, error -71 [ 357.862110][ T6011] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 357.883735][ T6011] usb 6-1: device descriptor read/8, error -71 [ 357.993838][ T6011] usb usb6-port1: unable to enumerate USB device [ 358.752271][ T6024] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 358.902100][ T6024] usb 7-1: Using ep0 maxpacket: 16 [ 359.141383][ T6024] usb 7-1: unable to get BOS descriptor or descriptor too short [ 359.144670][ T6024] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 359.147222][ T6024] usb 7-1: can't read configurations, error -71 [ 359.172152][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 359.323698][ T9] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 359.326995][ T9] usb 5-1: config 0 has no interface number 0 [ 359.330607][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=e3.da [ 359.333869][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.336474][ T9] usb 5-1: Product: syz [ 359.337898][ T9] usb 5-1: Manufacturer: syz [ 359.339429][ T9] usb 5-1: SerialNumber: syz [ 359.351953][ T9] usb 5-1: config 0 descriptor?? [ 359.357580][ T9] gspca_main: spca505-2.14.0 probing 041e:401d [ 359.560980][ T9] gspca_spca505: reg write: error -71 [ 359.562851][ T9] spca505 5-1:0.102: probe with driver spca505 failed with error -5 [ 359.566501][ T9] usbhid 5-1:0.102: couldn't find an input interrupt endpoint [ 359.571913][ T9] usb 5-1: USB disconnect, device number 8 [ 359.672320][ T5979] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 359.842144][ T5979] usb 8-1: Using ep0 maxpacket: 16 [ 359.849177][ T5979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.854632][ T5979] usb 8-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 359.858894][ T5979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.865439][ T5979] usb 8-1: config 0 descriptor?? [ 359.972175][ T9356] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 360.122184][ T9356] usb 6-1: Using ep0 maxpacket: 16 [ 360.126127][ T9356] usb 6-1: config 64 has an invalid interface number: 42 but max is 0 [ 360.129528][ T9356] usb 6-1: config 64 has no interface number 0 [ 360.132269][ T9356] usb 6-1: config 64 interface 42 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 360.137184][ T9356] usb 6-1: config 64 interface 42 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 1023 [ 360.141396][ T9356] usb 6-1: config 64 interface 42 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 360.146018][ T9356] usb 6-1: config 64 interface 42 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 360.150624][ T9356] usb 6-1: config 64 interface 42 has no altsetting 0 [ 360.159625][ T9356] usb 6-1: New USB device found, idVendor=12d1, idProduct=1004, bcdDevice= 0.00 [ 360.163656][ T9356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.167021][ T9356] usb 6-1: Product: syz [ 360.168945][ T9356] usb 6-1: Manufacturer: syz [ 360.170947][ T9356] usb 6-1: SerialNumber: syz [ 360.178368][ T9835] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 360.202164][ T6024] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 360.280422][ T5979] cypress 0003:04B4:DE61.0003: unknown main item tag 0x1 [ 360.286078][ T5979] cypress 0003:04B4:DE61.0003: hidraw1: USB HID vff.fc Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 360.372399][ T6024] usb 7-1: Using ep0 maxpacket: 32 [ 360.376783][ T6024] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 360.380021][ T6024] usb 7-1: config 0 has no interface number 0 [ 360.382744][ T6024] usb 7-1: config 0 interface 184 has no altsetting 0 [ 360.389345][ T6024] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 360.392381][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.394923][ T6024] usb 7-1: Product: syz [ 360.396254][ T6024] usb 7-1: Manufacturer: syz [ 360.397745][ T6024] usb 7-1: SerialNumber: syz [ 360.400783][ T6024] usb 7-1: config 0 descriptor?? [ 360.404287][ T6024] smsc75xx v1.0.0 [ 360.480689][ T9] usb 8-1: USB disconnect, device number 4 [ 360.732218][ T9356] usb-storage 6-1:64.42: USB Mass Storage device detected [ 360.800448][ T9356] usb 6-1: USB disconnect, device number 16 [ 361.219432][ T6024] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 361.223029][ T6024] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 361.226266][ T6024] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 361.229663][ T6024] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 361.233471][ T6024] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 361.236947][ T6024] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 361.240831][ T6024] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 361.252314][ T6024] usb 7-1: USB disconnect, device number 11 [ 362.886497][ T9912] syzkaller0: entered promiscuous mode [ 362.888355][ T9912] syzkaller0: entered allmulticast mode [ 364.403396][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 364.563400][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 364.566868][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 364.570046][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 364.573166][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.577479][ T9965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 364.581965][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 365.215995][ T9997] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 365.224828][ T9997] CIFS mount error: No usable UNC path provided in device string! [ 365.224828][ T9997] [ 365.229750][ T9997] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 365.316591][T10003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.320658][T10003] team0: Port device bond0 added [ 365.335149][T10003] team0: Failed to send port change of device bond0 via netlink (err -105) [ 365.348526][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.354698][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.361172][T10003] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 365.366868][T10003] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 366.256196][T10031] kvm: apic: phys broadcast and lowest prio [ 366.927707][T10044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1158'. [ 367.369068][ T3243] usb 8-1: USB disconnect, device number 5 [ 367.678675][T10068] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 367.882221][T10073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1168'. [ 368.013933][T10078] syz.2.1167 uses obsolete (PF_INET,SOCK_PACKET) [ 368.345621][T10082] syzkaller0: entered promiscuous mode [ 368.347384][T10082] syzkaller0: entered allmulticast mode [ 369.052155][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 369.176353][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 369.176365][ T40] audit: type=1326 audit(1760796946.067:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.2.1167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7fc00000 [ 369.223791][ T9] usb 6-1: config 164 has an invalid interface number: 33 but max is 0 [ 369.226513][ T9] usb 6-1: config 164 has no interface number 0 [ 369.228568][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=a0.45 [ 369.231392][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.309669][T10098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.349401][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1175'. [ 369.353180][T10099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1175'. [ 369.354472][T10101] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1178'. [ 369.356032][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1175'. [ 369.443791][ T9] usb 6-1: string descriptor 0 read error: -71 [ 369.465965][ T9] usb 6-1: USB disconnect, device number 17 [ 369.469579][ T9] ================================================================== [ 369.472121][ T9] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x227/0x250 [ 369.474557][ T9] Read of size 8 at addr ffff8880220218a0 by task kworker/0:0/9 [ 369.477748][ T9] [ 369.479104][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 369.479118][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 369.479125][ T9] Workqueue: usb_hub_wq hub_event [ 369.479138][ T9] Call Trace: [ 369.479142][ T9] [ 369.479146][ T9] dump_stack_lvl+0x116/0x1f0 [ 369.479173][ T9] print_report+0xcd/0x630 [ 369.479185][ T9] ? __virt_addr_valid+0x81/0x610 [ 369.479195][ T9] ? __phys_addr+0xe8/0x180 [ 369.479204][ T9] ? hdm_disconnect+0x227/0x250 [ 369.479219][ T9] kasan_report+0xe0/0x110 [ 369.479229][ T9] ? hdm_disconnect+0x227/0x250 [ 369.479245][ T9] hdm_disconnect+0x227/0x250 [ 369.479261][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 369.479273][ T9] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 369.479286][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 369.479297][ T9] device_remove+0x125/0x170 [ 369.479317][ T9] device_release_driver_internal+0x44b/0x620 [ 369.479334][ T9] bus_remove_device+0x22f/0x420 [ 369.479348][ T9] device_del+0x396/0x9f0 [ 369.479362][ T9] ? __pfx_device_del+0x10/0x10 [ 369.479375][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 369.479385][ T9] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 369.479399][ T9] ? do_raw_spin_lock+0x12c/0x2b0 [ 369.479419][ T9] usb_disable_device+0x355/0x7d0 [ 369.479437][ T9] usb_disconnect+0x2e1/0x9c0 [ 369.479454][ T9] hub_event+0x1c81/0x4fe0 [ 369.479467][ T9] ? __lock_acquire+0xb8a/0x1c90 [ 369.479478][ T9] ? __pfx_hub_event+0x10/0x10 [ 369.479486][ T9] ? assoc_array_delete+0xf0/0xd10 [ 369.479501][ T9] ? rcu_is_watching+0x12/0xc0 [ 369.479516][ T9] process_one_work+0x9cf/0x1b70 [ 369.479531][ T9] ? __pfx_hub_event+0x10/0x10 [ 369.479540][ T9] ? __pfx_process_one_work+0x10/0x10 [ 369.479554][ T9] ? assign_work+0x1a0/0x250 [ 369.479565][ T9] worker_thread+0x6c8/0xf10 [ 369.479579][ T9] ? __pfx_worker_thread+0x10/0x10 [ 369.479592][ T9] kthread+0x3c5/0x780 [ 369.479603][ T9] ? __pfx_kthread+0x10/0x10 [ 369.479614][ T9] ? rcu_is_watching+0x12/0xc0 [ 369.479628][ T9] ? __pfx_kthread+0x10/0x10 [ 369.479639][ T9] ret_from_fork+0x675/0x7d0 [ 369.479651][ T9] ? __pfx_kthread+0x10/0x10 [ 369.479661][ T9] ret_from_fork_asm+0x1a/0x30 [ 369.479675][ T9] [ 369.479679][ T9] [ 369.551976][ T9] Allocated by task 9: [ 369.553329][ T9] kasan_save_stack+0x33/0x60 [ 369.554763][ T9] kasan_save_track+0x14/0x30 [ 369.556286][ T9] __kasan_kmalloc+0xaa/0xb0 [ 369.557775][ T9] hdm_probe+0xb3/0x19a0 [ 369.559237][ T9] usb_probe_interface+0x303/0xa40 [ 369.560905][ T9] really_probe+0x241/0xa90 [ 369.562379][ T9] __driver_probe_device+0x1de/0x440 [ 369.564087][ T9] driver_probe_device+0x4c/0x1b0 [ 369.565719][ T9] __device_attach_driver+0x1df/0x310 [ 369.567417][ T9] bus_for_each_drv+0x159/0x1e0 [ 369.569000][ T9] __device_attach+0x1e4/0x4b0 [ 369.570538][ T9] bus_probe_device+0x17f/0x1c0 [ 369.572076][ T9] device_add+0x1148/0x1aa0 [ 369.573535][ T9] usb_set_configuration+0x1187/0x1e20 [ 369.575258][ T9] usb_generic_driver_probe+0xb1/0x110 [ 369.576973][ T9] usb_probe_device+0xef/0x3e0 [ 369.578504][ T9] really_probe+0x241/0xa90 [ 369.579959][ T9] __driver_probe_device+0x1de/0x440 [ 369.581656][ T9] driver_probe_device+0x4c/0x1b0 [ 369.583272][ T9] __device_attach_driver+0x1df/0x310 [ 369.584982][ T9] bus_for_each_drv+0x159/0x1e0 [ 369.586573][ T9] __device_attach+0x1e4/0x4b0 [ 369.588145][ T9] bus_probe_device+0x17f/0x1c0 [ 369.589729][ T9] device_add+0x1148/0x1aa0 [ 369.591175][ T9] usb_new_device+0xd07/0x1a60 [ 369.592730][ T9] hub_event+0x2f34/0x4fe0 [ 369.594167][ T9] process_one_work+0x9cf/0x1b70 [ 369.595735][ T9] worker_thread+0x6c8/0xf10 [ 369.597220][ T9] kthread+0x3c5/0x780 [ 369.598512][ T9] ret_from_fork+0x675/0x7d0 [ 369.599976][ T9] ret_from_fork_asm+0x1a/0x30 [ 369.601544][ T9] [ 369.602448][ T9] Freed by task 9: [ 369.603696][ T9] kasan_save_stack+0x33/0x60 [ 369.605391][ T9] kasan_save_track+0x14/0x30 [ 369.606915][ T9] __kasan_save_free_info+0x3b/0x60 [ 369.608607][ T9] __kasan_slab_free+0x5f/0x80 [ 369.610166][ T9] kfree+0x2b8/0x6d0 [ 369.611415][ T9] device_release+0xa4/0x240 [ 369.612894][ T9] kobject_put+0x1e7/0x5a0 [ 369.614358][ T9] device_unregister+0x2f/0xc0 [ 369.615893][ T9] hdm_disconnect+0x10b/0x250 [ 369.617413][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 369.619054][ T9] device_remove+0x125/0x170 [ 369.620539][ T9] device_release_driver_internal+0x44b/0x620 [ 369.622465][ T9] bus_remove_device+0x22f/0x420 [ 369.624067][ T9] device_del+0x396/0x9f0 [ 369.625461][ T9] usb_disable_device+0x355/0x7d0 [ 369.627089][ T9] usb_disconnect+0x2e1/0x9c0 [ 369.628636][ T9] hub_event+0x1c81/0x4fe0 [ 369.630059][ T9] process_one_work+0x9cf/0x1b70 [ 369.631635][ T9] worker_thread+0x6c8/0xf10 [ 369.633115][ T9] kthread+0x3c5/0x780 [ 369.634465][ T9] ret_from_fork+0x675/0x7d0 [ 369.635928][ T9] ret_from_fork_asm+0x1a/0x30 [ 369.637444][ T9] [ 369.638214][ T9] The buggy address belongs to the object at ffff888022020000 [ 369.638214][ T9] which belongs to the cache kmalloc-8k of size 8192 [ 369.642510][ T9] The buggy address is located 6304 bytes inside of [ 369.642510][ T9] freed 8192-byte region [ffff888022020000, ffff888022022000) [ 369.646803][ T9] [ 369.647596][ T9] The buggy address belongs to the physical page: [ 369.649666][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22020 [ 369.652386][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 369.655042][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 369.657405][ T9] page_type: f5(slab) [ 369.658677][ T9] raw: 00fff00000000040 ffff88801b443180 dead000000000100 dead000000000122 [ 369.661311][ T9] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 369.663952][ T9] head: 00fff00000000040 ffff88801b443180 dead000000000100 dead000000000122 [ 369.666745][ T9] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 369.669495][ T9] head: 00fff00000000003 ffffea0000880801 00000000ffffffff 00000000ffffffff [ 369.672197][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 369.674942][ T9] page dumped because: kasan: bad access detected [ 369.676941][ T9] page_owner tracks the page as allocated [ 369.678725][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6693, tgid 6692 (syz.3.183), ts 102525488395, free_ts 55266156816 [ 369.685217][ T9] post_alloc_hook+0x1c0/0x230 [ 369.686743][ T9] get_page_from_freelist+0x10a3/0x3a30 [ 369.688541][ T9] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 369.690434][ T9] alloc_pages_mpol+0x1fb/0x550 [ 369.691976][ T9] new_slab+0x24a/0x360 [ 369.693342][ T9] ___slab_alloc+0xdc4/0x1ae0 [ 369.694847][ T9] __slab_alloc.constprop.0+0x63/0x110 [ 369.696569][ T9] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 369.698570][ T9] kmalloc_reserve+0xef/0x2c0 [ 369.700056][ T9] __alloc_skb+0x166/0x380 [ 369.701490][ T9] nf_tables_chain_notify+0xb8/0x5a0 [ 369.703165][ T9] nf_tables_commit+0x3ec0/0x5f20 [ 369.704745][ T9] nfnetlink_rcv_batch+0x115e/0x2350 [ 369.706466][ T9] nfnetlink_rcv+0x3c1/0x430 [ 369.707936][ T9] netlink_unicast+0x5aa/0x870 [ 369.709497][ T9] netlink_sendmsg+0x8c8/0xdd0 [ 369.711019][ T9] page last free pid 5938 tgid 5938 stack trace: [ 369.713013][ T9] __free_frozen_pages+0x7df/0x1160 [ 369.714677][ T9] __put_partials+0x130/0x170 [ 369.716170][ T9] qlist_free_all+0x4d/0x120 [ 369.717642][ T9] kasan_quarantine_reduce+0x195/0x1e0 [ 369.719359][ T9] __kasan_slab_alloc+0x69/0x90 [ 369.720900][ T9] kmem_cache_alloc_noprof+0x250/0x6e0 [ 369.722638][ T9] getname_flags.part.0+0x4c/0x550 [ 369.724261][ T9] getname_flags+0x93/0xf0 [ 369.725693][ T9] do_sys_openat2+0xb8/0x1d0 [ 369.727157][ T9] __ia32_compat_sys_openat+0x16d/0x210 [ 369.728938][ T9] __do_fast_syscall_32+0x7c/0x300 [ 369.730588][ T9] do_fast_syscall_32+0x32/0x80 [ 369.732127][ T9] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.734137][ T9] [ 369.734912][ T9] Memory state around the buggy address: [ 369.736673][ T9] ffff888022021780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.739193][ T9] ffff888022021800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.741745][ T9] >ffff888022021880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.744271][ T9] ^ [ 369.745902][ T9] ffff888022021900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.748436][ T9] ffff888022021980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.750971][ T9] ================================================================== [ 369.753601][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.792906][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 369.795216][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 369.798076][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 369.801435][ T9] Workqueue: usb_hub_wq hub_event [ 369.802977][ T9] Call Trace: [ 369.804033][ T9] [ 369.804959][ T9] dump_stack_lvl+0x3d/0x1f0 [ 369.806418][ T9] vpanic+0x640/0x6f0 [ 369.807688][ T9] panic+0xca/0xd0 [ 369.808932][ T9] ? __pfx_panic+0x10/0x10 [ 369.810404][ T9] ? hdm_disconnect+0x227/0x250 [ 369.811951][ T9] ? preempt_schedule_common+0x44/0xc0 [ 369.813694][ T9] ? preempt_schedule_thunk+0x16/0x30 [ 369.815396][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 369.817019][ T9] check_panic_on_warn+0xab/0xb0 [ 369.818652][ T9] end_report+0x107/0x170 [ 369.820024][ T9] kasan_report+0xee/0x110 [ 369.821466][ T9] ? hdm_disconnect+0x227/0x250 [ 369.823023][ T9] hdm_disconnect+0x227/0x250 [ 369.824550][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 369.826623][ T9] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 369.828617][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 369.830456][ T9] device_remove+0x125/0x170 [ 369.831929][ T9] device_release_driver_internal+0x44b/0x620 [ 369.833871][ T9] bus_remove_device+0x22f/0x420 [ 369.835459][ T9] device_del+0x396/0x9f0 [ 369.836845][ T9] ? __pfx_device_del+0x10/0x10 [ 369.838404][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 369.839964][ T9] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 369.841785][ T9] ? do_raw_spin_lock+0x12c/0x2b0 [ 369.843406][ T9] usb_disable_device+0x355/0x7d0 [ 369.845007][ T9] usb_disconnect+0x2e1/0x9c0 [ 369.846522][ T9] hub_event+0x1c81/0x4fe0 [ 369.847956][ T9] ? __lock_acquire+0xb8a/0x1c90 [ 369.849568][ T9] ? __pfx_hub_event+0x10/0x10 [ 369.851129][ T9] ? assoc_array_delete+0xf0/0xd10 [ 369.852754][ T9] ? rcu_is_watching+0x12/0xc0 [ 369.854296][ T9] process_one_work+0x9cf/0x1b70 [ 369.855860][ T9] ? __pfx_hub_event+0x10/0x10 [ 369.857382][ T9] ? __pfx_process_one_work+0x10/0x10 [ 369.859081][ T9] ? assign_work+0x1a0/0x250 [ 369.860570][ T9] worker_thread+0x6c8/0xf10 [ 369.862054][ T9] ? __pfx_worker_thread+0x10/0x10 [ 369.863704][ T9] kthread+0x3c5/0x780 [ 369.865004][ T9] ? __pfx_kthread+0x10/0x10 [ 369.866510][ T9] ? rcu_is_watching+0x12/0xc0 [ 369.868062][ T9] ? __pfx_kthread+0x10/0x10 [ 369.869557][ T9] ret_from_fork+0x675/0x7d0 [ 369.871042][ T9] ? __pfx_kthread+0x10/0x10 [ 369.872531][ T9] ret_from_fork_asm+0x1a/0x30 [ 369.874088][ T9] [ 369.875754][ T9] Kernel Offset: disabled [ 369.877129][ T9] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:15:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852e20d5 RDI=ffffffff9adf3e80 RBP=ffffffff9adf3e40 RSP=ffffc900001b7150 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9adf3e40 R15=ffffffff852e2070 RIP=ffffffff852e20ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080124018 CR3=000000004fef3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000f3d1a3 RBX=0000000000000001 RCX=ffffffff8b6382a9 RDX=0000000000000000 RSI=ffffffff8db00db1 RDI=ffffffff8bf1ef40 RBP=ffffed1003b5d490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801daea480 R14=ffffffff90836fd0 R15=0000000000000000 RIP=ffffffff8b636d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa930328e9c CR3=000000006534a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefee000 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000002000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563c791e9a10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563c791c9cb0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7968bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000ff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31326e6937417069 3534637369393863 6937437064423963 7364353463643534 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a430502560002 0540494c43055600 0541405144405746 000a56001f47000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563900627375 0000000000000021 00000033332e3436 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4370644239637364 3534636435343041 6438314643703432 3430763a6273753d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0624371b6a212637 35092b3074646604 2038426379031119 3459535462065007 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f677f7b6b7d3f7f 7f5f3f3f7f7f7f6f 7f7f7f7b7f3f7f7f 3e7f7f7c7e6f7f7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563c791db150 0000563c791d4630 0000563c791eb040 0000563c791e4970 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5341494c413d4f45 003736310039362f 3733313d45434146 52453d4549005456 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 432f3432343d4f43 003436310000302f 3733313d43433432 34303d3938005437 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc900074e0000 RBX=ffff888023338000 RCX=ffffffff819cd433 RDX=1ffff1100466725a RSI=ffffffff867ddd6f RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc90000538ea8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90836cc0 R13=dffffc0000000000 R14=ffff8880233392d0 R15=0000000000000000 RIP=ffffffff867ddd97 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979df000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c242e5b CR3=000000004b190000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=0000000000000009 RCX=ffffffff95afa688 RDX=0000000000000008 RSI=ffff888027158c48 RDI=ffff888027158000 RBP=ffffc9000373f410 RSP=ffffc9000373f370 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000118 R11=0000000000000001 R12=ffff888027158c48 R13=0000000000000200 R14=0000000000000007 R15=ffff888027158000 RIP=ffffffff819884dd RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097adf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc9a67085d0 CR3=0000000067c2a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73f5ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000